Install and configure Azure AD Connect : Azure AD Connect is a tool for identity synchronization between on-premise AD and Azure AD. Azure Ad connect supports hybrid authentication which includes Password hash authentication (PHA), Pass-through authentication(PTA) and federation (ADFS). Hybrid authentication methods provide single-sign on capabilities.

Azure AD connect is completely free to use and synchronize even if we don’t own any cloud subscriptions. it is an upgraded version of Azure AD sync and Dirsync .

Requirement for Azure AD connect:
  1. Azure AD tenant. (
  2. AD schema version and forest functional level (FFL) must be set to Server 2003 or higher.
  3. Domain Admin credential.
  4. Global Admin of the tenant.
  5. Add and verify the domain.
  6. Update the UPN name of the users in local AD to match the public domain name verified in the cloud. (UPN suffix to be updated from user@domain.local to
  7. SQL database (optional- To manage 100,000+ objects)
  8. Ports to be allowed in firewall –

Microsoft recommend to use Idfix Dirsync error remediation tool before before initial sync to remediate the object errors in the Active Directory preparation.

Installation of Azure AD connect:

Download Azure Active Directory Connect from official link

  1. Download the latest Azure AD connect and double click on the installed file for installation.
  2. Read the license agreement and click ‘Continue’ if you agree.
    Install and configure Azure AD connect
  3. Azure AD connect is available to install as ‘Custom installation‘ and ‘Express installation‘. Click ‘Customize‘ to enter custom installation.
    • Custom installation provides option to specify custom location, sync only the selected OU, adding the SQL server instance. Proceed with custom installation to sync users only from the selected OU.Install and configure Azure AD connect
    • Express installation is recommended by Microsoft for single server forest. By default, password hash sync and auto upgrade is enabled with express settings. Proceed with express installation to sync the entire domain. In this example, we installing with express install option.
  4. Enter the credential of the Azure AD Global admin and click ‘Next‘.
  5. Enter enterprise admin credential of on premise AD and click ‘Next’
  6. In Next step, AD connect will verify that UPN suffix of local AD matches with added custom Azure AD domain. Verify your domain and click ‘Next’.Install and configure Azure AD connect
  7. Configure: Select ‘Synchronization process’ to start sync immediately. Select ‘Exchange hybrid deployment’ if planning to migrate mailboxes (Recommended). Click ‘Install’Install and configure Azure AD connect
  8. AD connect will install synchronization service and initiate sync between local AD and Azure AD.Install and configure Azure AD connect
  9. Congrats ! Configuration is completed successfully. Install and configure Azure AD connect
  10. Verify the configuration : Login in to Microsoft 365 admin center with global admin credential to verify initial sync.


AM@RNATH is a Technology specialist primarily focus on Microsoft Technologies & Cloud Security. His certification includes M365 Certified: Enterprise Admin Expert. He loves to explore things from the latest technologies to cooking new recipes. Basically from Chennai, the southern part of India. Lucky son, friendly husband, and a proud father who loves to spend time with his family & friends while the laptop is not in his table.

Leave a Reply

Your email address will not be published.